chore(sync): rebuild wff-code/wff-chat from .claude@fd99eb0 - #4
Conversation
|
Warning Review limit reached
Next review available in: 24 minutes Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available. How can I continue?After more reviews become available, a review can be triggered using the To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews. How do review limits work?CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability. For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window. Please refer docs for additional details. Review details⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Free Run ID: 📒 Files selected for processing (22)
Note 🎁 Summarized by CodeRabbit FreeThe PR author is not assigned a seat. If you are a newly provisioned user and your organization has automatic seat assignment enabled, open a new pull request to trigger seat assignment. Otherwise, ask an organization administrator to assign a seat through the subscription management page at https://app.coderabbit.ai/login. Comment |
There was a problem hiding this comment.
Pull request overview
Rebuilds the wff-code and wff-chat plugins from the referenced .claude source commit, primarily updating internal skill/agent documentation around operations posture (OPS-*), applicability scoping, and removing legacy per-PR CHANGELOG expectations in favor of release-time generation from Conventional Commits.
Changes:
- Introduces/extends
OPS-*operations posture guidance across launch and observability skills, plus adds theoperations-posture-auditorto repo-compliance workflows. - Removes changelog-edit / changelog-gate guidance across PR-review/PR-fix/git workflows and checklists, aligning to semantic-release / python-semantic-release generation.
- Expands OWASP-oriented agents (web/api/llm/ml/citizen/agentic) with additional detection patterns and clarifications.
Reviewed changes
Copilot reviewed 22 out of 22 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| plugins/wff-code/skills/task-observer/SKILL.md | Revises observation flushing guidance to rely on structural/behavioral backstops (Stop hook + batch boundaries). |
| plugins/wff-code/skills/shipping-and-launch/SKILL.md | Adds OPS-*-referenced security/infra checklist items and narrative tying to the standards manifest. |
| plugins/wff-code/skills/repo-compliance/workflows/interactive-mode.md | Adds operations-posture-auditor dispatch rules and applicability semantics. |
| plugins/wff-code/skills/repo-compliance/SKILL.md | Introduces operations domain mapping and a universal tri-state applies_to rule (APPLIES/SKIP/UNKNOWN). |
| plugins/wff-code/skills/project-planning/templates/roadmap-template.md | Removes “CHANGELOG updated” from success criteria. |
| plugins/wff-code/skills/pr-review/workflows/pr-review.md | Removes changelog-gate-specific remediation guidance; keeps required-vs-non-required check handling and commit-type logic. |
| plugins/wff-code/skills/pr-review/workflows/pr-fix.md | Removes changelog from fix taxonomy; explicitly instructs not to hand-edit CHANGELOG or apply skip labels. |
| plugins/wff-code/skills/observability-and-instrumentation/SKILL.md | Adds security alerting guidance and links it to OPS-005/006/004. |
| plugins/wff-code/skills/handoff/context/handoff-quality-standards.md | Updates coupled-invariant checklist to drop hand-edited changelog requirement. |
| plugins/wff-code/skills/git/workflows/pr.md | Removes changelog requirements and updates skip-label guidance and merge conflict heuristics. |
| plugins/wff-code/agents/owasp-web.md | Adds additional OWASP categories/patterns (e.g., misconfiguration, insecure design, integrity failures, logging/alerting notes). |
| plugins/wff-code/agents/owasp-ml.md | Adds additional ML security categories and references to OPS-* runtime controls where applicable. |
| plugins/wff-code/agents/owasp-llm.md | Adds supply chain, poisoning, vector/embedding, and misinformation patterns + test expectations. |
| plugins/wff-code/agents/owasp-citizen.md | Adds citizen-dev specific detection patterns and clarifies runtime-only observability/governance signals. |
| plugins/wff-code/agents/owasp-api.md | Adds additional API security categories (authn, BFLA, misconfig, inventory, unsafe consumption) and runtime-only notes. |
| plugins/wff-code/agents/owasp-agent.md | Expands OWASP Agentic Top 10 specialist categories/patterns (AG02/AG04/AG05/AG08/AG09). |
| plugins/wff-code/agents/ossf-compliance-auditor.md | Aligns vulnerability changelog requirement to commit-message provenance (PSR-generated changelog). |
| plugins/wff-code/agents/compliance-synthesis.md | Adds explicit data-quality exclusions for parse artifacts and clarifies override-volume reporting constraints. |
| plugins/wff-code/agents/code-reviewer.md | Removes “CHANGELOG entry added” from the reviewer checklist. |
| plugins/wff-chat/skills/shipping-and-launch/SKILL.md | Mirrors OPS-* checklist and standards-manifest narrative updates from wff-code. |
| plugins/wff-chat/skills/observability-and-instrumentation/SKILL.md | Mirrors security alerting guidance tied to OPS-*. |
| plugins/wff-chat/skills/git/workflows/pr.md | Mirrors changelog-removal and skip-label guidance updates from wff-code. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| **Backstop 1, structural: the Stop hook.** At turn end, | ||
| `scripts/hooks/task-observer-flush-check.py` compares the observation count | ||
| against a baseline recorded at session start by | ||
| `scripts/hooks/task-observer-reminder.sh`. When a session used tools to |
Auto-generated by ByronWilliamsCPA/.claude's sync-org-plugins.yml from commit fd99eb0b86933e31321514676b55d4b8ad85f759. Rebuilds both plugins from scripts/org-plugins/manifest.yaml; review the diff, this repo is a pure build artifact and should never be hand-edited.